<19)B*H»S1F/? (JP) 02) ^ ^ J|# 1^ ^ fg (A) (ll)4*Wffl»«iH«^ 

JNpM^II -202766 

(43)&iBQ ^^11^(1999) 7 ^30 S 

<51)Inta.' IStSiJia^ F I 

G 0 9 C 1/00 6 4 0 G 0 9 C 1/00 6 4 0 B 

H04L 9/32 H0 4L 9/00 6 7 5B 



mstm^ m^(Dm5 ol (^15 k) 





»K¥lO-8629 


(TDUHA 


000001007 










(22)mmB 


spfiKlO^(1998) 1^160 




m]Rffi:*:fflKm^ 3 TB30# 2 ^ 
















*3S«P:*:EKT*,^3TB30»2# 



















(54) KEM©**] 5'^i?3')m^:m, -ensfflts?£:«^«'>x7^Axt;ffim«fs 



(57) 




(2) 



mW- 1 1 - 2 O 2 7 6 6 



^Ibx 7^ ^ <t ^ ^ t; c t ^i^fiSi it ^ 7^ -< V ^ 

ir^ v^;Ht$B(cJ^ LrJbBE^iJS1tlg:at;jilE^S/<^ 
^ v^JUltfgi: J:fE««a>mga«/)<iELL^*^S*^*¥J 



±fE*BS1t$g^/S:^7^^v7^T^/fi^titc«Tt-?tc8JS5«$g 

&i;-htE^ifiit#s±iaxi^'>7^T*±fi£**i.tc 

^TX 7^ <t *M(="&tr - "T ^ 

[IS*I17] ±fST'<i>^;US«:&5£(i. E I Gam 
[|S*^8] -hlET^-r V>^;U^«:^5tti. El Gam 

i:-r^K*«5SE«<D7^<i>^;uW«*5tc 

1 O ] 1 ~ 9 (7)^DiH;bN|ctEm0T'< V? 

Si (DZL— 1f;5<||2a)ZL— if(c«Lr. SiaM^C-SSfrfc 

. JitBS2(DZL-if(c«-r^1S«*<. -ttESia>ZL--ifA< 
-tfiEzL-tf iS$g^/S#PS(Ccfc U ±n£ X^fz^O-Q&^Z. t 

±U3.—^mmmm^^vmm^Hfzmn'^mi^x. -4^ 
±t^:i.-^mm^m.^mzj^^)±m^i\^fzmzt;:ji^;^ 



(3) 



mmw- 1 1 - 2 O 2 7 6 6 



±t^m^j^^f9Lvmm^Mzmzts:j<^ jSLifrntzt^ 

itmm 1 2 ] ±tmm^i&xmm^*ifzmzU/<'^ 
^-^Rifrnztjim^mn^mi^x. t^-t i^^jntffifc 

fzu&^mm^±f&r^m^m^±m^fSLt . 

±tm^mm±fS.^^x±fS.is*ifzmztjim^mm:^^ 

j&^^mztj:ji=yj^-^i±fit'r^^<^^-'^±f&^Si 

±ummm±m^fkvdm,^*ifzmfztsiW^mn. ± 

K^i^^-^±f&^&v±m^i^tzmtztji/<^j^'-^. 

Rxf±ti<i>mmm±f^^^x±f^^Mzmzts:^j^mmm 

So 

[IS*il 1 5 ] IS^i1 1 1 1 4 cD^pJ;|^A^(::fB^cDil 
[0 00 1] 

[0 0 0 2] 



[0 0 0 3] ^lO^oU-fS^^tLXlt. m^\t. -i^iaS 

[t. a^iLtcafiP»9^(7)ill^i#;b<itr'fe^*^$:^^lllc^s 

4,<7>i:LTf*. t$ffi¥8- 1 O 8 2 2 5#lzBa^*nr 

[0 0 0 4] cc-c. Rxf m^^i^mmm^ 
sj {z'^l^xM:#mzm^^-r^o 
[0 0 0 5] (1) ret^j 

*-r. rpi^j ti$fi(DmR**<^»#iaHi::«::i*lg 
f*. rfi^Mj <tn¥fi+i^Bt#^ba(=m-r^/^^p« — 

[0 0 0 6] ±i^a>^5U?6^Xit^^(0^±\±^. Bt 
•^<b^C^L^^flS^^b^^t^^im^lCfflL^'5)m^S(C^§^ 

gS) a)Sit#-et. fl?iS^pJfig<i:0t^^bS*?a-r'i)C: 

tt<X^^o 

[0 0 0 7] ^tz. mmzit. ^< (DBf-^r^U^'UXA 

t<$>^o "t^zx. m^\t. ^mtm^^i^mx'^^t^^f)^ 
Bf^ (^®SBf#) (oz-oiz^mLxmrn-r^o 

[0008] ( 1 - 1 ) ri^^«-xB6^ (^&3MB&^) J 
rgf^f*B6^j r^ga^Bf^j ti^miii^. Bt^ 

^bSitm^gTb^S*? y . B&^ibSTbN P>m^@j!)<§^ict+ 

<t^mL. m.^m^m^iz^nLx^m^*i^^^<D;zt 



(4) 
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[0 0 0 9] ccr% ^^^^t^v^ommrn^^mR 

t?^-&l^>^«^Bi^<t LT(i. RSABt^ (R.LRivest. 
A.Shamir and L Ad I eman. " A method of obtaining digl 
tal signatures and public key cryptosystems, "Commu 
ni cat ions of ACM, Vol. 21. No. 2. pp. 120-126. 1978 ) 

E I Gam a I Bg-^ (T. E. El Gama I , "A public key 
cryptpsystem and a signature scheme based on discr 
ete logarithms, "IEEE Transaction on Information Th 
eory, Vol. IT-31, No. 4. pp. 496-472, 1985 ) /)<^f>tirL> 

Flat— Sham! r Bf-^ (A. Fiat, A. Shamir, "How t 
0 prove yourself : practical solutions of Identifica 
tion and signature probi rms. "Proc. of CRYPTO' 86. 198 
7) Schnor r BS^ (C. P. Schnorr, "Efficient 

signature generation by smart cards, "Journal of C 
ryptology, vol. 4. pp. 161-174. 1991 ) t^^^^Xl^^o 

[0 0 10] 0tJx.(i. E I G ama I B6-^lCfclt^B&^ 

[00 11] rzj *SSft±«:a>m^. rzp j 
So]^±p*j^a)^^(Dm^. rzp \ (o) J ^zp 
*^b0^^LNtzm^. rzp * J ^Zp a^mm^-^pt 

A = Bm o d C 

?^cf-&Mfife;{)<jayiz:o^#. B^CT'SiJoyc<t#<7>^y;{)< 
AT&i»C<t (eS(DS«[kA<#«L. rB=k-C + 
Aj 'h<i&^}iLr:>:Lt) *mi*U. 

A = B (mo d C) 

J^cf^fem;!)<jSyiL-^i:#. A*CTfiJofci:#<D^y 
B*C-CiiJotzi:#(D^y ltA<^LL^Ci:^Sl*■r 

^irLTIi. ^^p. Zp * (7>^^-efeyE.o<iS[p- 
KDof. St/-*lPltt/N*>i>a.|8SaH0 : Z-^Zp \ 

{o) ^mi^^o ^tz. smcoD.—-^ \ (D^^m 
M) s Tsj ezp-i J tL. is^itm {<t^mm) ^ 



[001 2 ] 0B6^fb 

^z-e. ^— tf j 7b<2F:t (pi *v-tr— m (eZp ) * 

^fL^ii^. -r5'cf+?*> piU-h<DStfS<7>*S^(::i*> "tO^y 
#:^P*v^i::>^LT. UlTa)^III1^0Bi^^b3^)<^T4:>*t«^o 

4o 

Cl =aknriodp 

C2 — m - v| k modp 

[ O 0 1 3 ] 

±tECDBe-^<b(Ccfc y . 3.—- tP j ffl3g^|$SA^t»iL— tf i 
ffidSfi3|^3^Slcli. Ci:at;C2 3!)<iiHl$;K4o ^tx. 

m=C2 /Ci Simo d p 

[0 0 14] OT-f v^;uS«<7>^jS 

±IB®«[^(CcJ;y^#t)*itcJ>i 'V-b— vm (ez) ic^U 
3.-Hf i ffi3S^^a;b<^< v^;u¥«^±/*-r'&ii 
3.— i ffiS*3^ST?ri. jaT<o:^7^*>3^i 

'>::^4(D^liiHT*^<;)to^;!)<tT*>*L4„ /as. -tlEQBS^^b 

7.^v':f\ : 3.-- »f i ffljK5S^Bi±. SLSk (ezp-i 

* ) ^±Yk-th. 
r = Of k modp 

s= (HQ (m) — sj " r) • k"1mod (p— 1) 

[o o 1 5] ®7^-r s>^;uS«a)glSE 

ZL— 1f i ^4S*^SI*. - - - 



(5) 
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c^HO(ni)=vir -rS (modp) 
[0016] (1-2) rj^SpfHt^ (^tilSBS^) J 

rjsfft^ps^j tit. r^tiSSBS-^j ttmi*i. 

«^5tBS-^^3&<& y . DES (Data Encryption Standa 
rd) X^. FEAL (Fast data Encipherment Algorlth 
m) tl^^fzmmfi6^tLXfK<mi^h:>^Xl^^o 

'j-AB6^{i. >'>-tz-v(csLSi^xoR mmmm 

[0 0 1 7] fS4. ±3*Lt= (1) B&-§-(DM<f 

led cryptography second edition: protocols, a Igor ith 
ins. and source code In C j (SchneierS) . rjohn W 
iley&:Sons, Inc j ^(rJIi^ ^>^Tl^^o 

[0 0 18] (2) m^<i>mmmMm} 
o^ic. rm^'^mmmnm} tit. ±^Lfz (i- 
1). i^««iBt# {^Ammm^) mic^i^x. BMcDn.- 

't^'^OX^^. mW^^^\t. rcertif Ication Author 

ity J tmtici^mmx^^m\\t^=^—^ (.^t. ca 
7t^. m^it. /i:^ni-\Txmv^L. +f j coia^iitt 

tifzy'^i>^Ji^mZ'^^m^^^tit^BX^^o C;tx 

(Ccfetj^ iL-if k ;i)<iL-if j tmm-r^mz. 
[0 0 19] rg«<i>gaiiijEB^«j tit. ±7^(0 

^ PK ^ t= I ^ii ^ I ^ L ^ i) - <t T* # ^ o C ^ ® ffl L tz 



i(DtLX\t. m^it. t#ll¥8- 1 0 8 22 6^{cBr1 
7r:ttiXl^^</Jl^—:fS^tmtiiX^^^U'r^ \>^i\^ 

[0 0 2 0] ±aa>j:3>£fg«'^saaijEB-flS*5SfflLfc 

^OtX^Xit. m^Lit. ?$Bi¥8- 1 0 8 22 5^(rg§ 

li. E5lc^-rcfc3<i:X-T*:^"::^S5 0 0'-S5 0 4(DiOr 
S:6<tTt>+l'S)c JUT. A^*V3^S 5 O 0-S 5 O 

( rzj rzp J S) l±. -taLfzE I Gam a 1 flt 

o 

[002 1] Xv-*>3^S 500: . vAt^A^jIO) 
^M^^^^ — ^PV (Public Values ) ^ LTIi, a^lBt 

p. iiLStq «iL. q I p-1) . Zp * tD^^-efet-J 

MoeSft q (7> or . -:^lS]tt^\*:/ va.BaSiHi : Zq x z 
-» {O. • • 2t -1] ^fflL^^e -tU^-*^. q 
(i. p - 1 Sitjy^y. X ezq \ {O) (c^LTorX 
= 1 (mo d p) TMi**:<. =qlcS*LTQrX = 

1 (modp) r-&y. Hi f*. Zq (DS*<bZ<r>^m 
*A*i:L2t - 1 j.UT<7)^^mMI&^tiJ:t|-r'&o^ L 

^^7^— -$1^— X P D (Public Database ) Ic^ft^tt 
-Ct^-&^©i:-r^o ^-T*. SEB^Sfg^T* (authority 
) Qffl3K*3SB7 Ol*. («J^®) sQ i:. St 

^\tm {<i^mm.) vQ ( vO =a-sO mo d p) <^$:^ 

a.— +P (User) j ffl3S5RSg 8 O l±. (» 
ffiS) sj i:. {"i^mim) vj (vj =a-sj 

modp) t^±f&i.. ^BaSvj $:>!t^|g7^— 

[o o 2 2] v^^»>:^s 5 o 1 : E€^BafiliiEB^S<D± 

;^(C. tiEB^m^^T#Qffi3g5S3^E7 Oli. ZL— j 
&afi|vj SLSt (random number ) rSffll^T^SIL 
fzz^-^tb. CCOzfr^f -SS^S (S c h n o r r 

v^;Ug«) ^-^nfe-r^o liEB^ 

»^^T#Qffi«g5RigS7 oii, a» (^ij^a^sia) r 

( r eZq \ {O) ) SS«^L. 
X = modp 
z = vj modp 
e = Hl (x , z j ) 
y=r4-e ■ sQ modq 

nf-St+S^^ff 5e ca>S c h n o r r BS^lCj:-5)7^^ 
^JUS« (y, e. z) *<g€^Ba@liEBJSi?fe'&o 
[0023] ;^-r'>:^S502 : g«^Ba@iiEB^S«7>iS 



(6) 
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:fS 50 1 (cr±fi£LfrS«^^^1SSEB^§ (y. e. 

z) ZL— »f j ffi«5S3Sg8 oicj^LxiiHi-r^o - 

e = Hi (ay •vQemodp, z) 
z=((yy -vOfimodp) ~Sj m o d p 

vQ e mo d p*<iaySEOCi:(Ccl:y. SSBcDfBfBS^bO 

[0 0 2 4] x-x*v3^s 5 0 3: ^i^mM^^omm 

m^^o MTLit. S c h n o r r^^Z^^^^ iy^Jl^ 

j ffl4flS5SSB8 0l*. WScDSLSarj (rj eZq * ) 

xj =xrJmodp 
e j = h ( x j . m) 
yj=rj+ej "sjmodq 

*>-tr— vm^t^l^, ( (y. e. z) , yj . ej , 

[0 0 2 5] x^»:/:>*is 5 O 4 : *«fitS 
^LT. ±3J&(D;?.-r':/:^s 5 o 3icTi2fe<l^tLtz7^'< V 

((y. e. z). yJ. ej, m) <7>S(1% 
(iHi*!^ (Verifier) ) i ^38*3^89 O li. 9t-f. 
±j&(DX'TV':fS 5 O 2(r*5lt-& 
© = Hi (orV -vQemodp. z) 

e j = H 1 ( X yj ■ z ejm o d p , m) 

JUSS r*iiEB^S«fr# Q ir J: y mii*ifz=L—^{z J: o T 

[0 0 2 6] 

-i^ga^tiEB^S^^^t'cOa.— -tf (c^l^;-r ^ t C75 1? fe 0*^3{)< 
^i)^i^Ui\^o{ztj:-DXl^^o cOJ:5*fg=S1t(*. 
T(7:)2 0(Di5^(::S-:5< ta)'T?fe^o 

[0 0 2 7] um^ :mmnmsm 

TGJ ^^ISS^tL. rcyj ^^tD^^TC^h-r^o * 
TvJ ^G07ttL. iSAi::>Pt-r^ vCDiltfe>t^gfe^ 

ri og [a] vj t-r^o -^-"C. Gc;)GLgii (7c(De 

[0 0 2 8] (5^2 : gStj[^gft(;)Jt|5Pa1fi 



Of. v = as ^ x = Qfr , z = cyrs:6<^x^+Ltc<t^. 

g [or] V <t I o g [x] z7!i<«Ll^*^S3b>**'JSiJ-r^ 

[0 0 2 9] ±S&0^5^a:iR^^RlfiR^2.t<jS.^JiL'O 
cirlCcfcU. g«^^gaSfiEB^S(ig«tt;5)WcS;K^o 
[0 0 3 0] L)b^L>S*<e>. ttJRTMi. (55t2(D^$<g 

2:6<jay5i:y='r. g«^a*^rfa^SEB^s<25E«tt*^*< 

[003 1 ] ffiS 1 a^gitftJ^faPp^^^ 

^< cti*; m^^v<Dm-^i&mzj;:^it$mizMLi^ 

mif^it. ij^^20^ms^^o)tt^?^mtmit^^t{z 

U^o C+L(Cc*:y. <5S2^fl?< c<t(i. {5^1 
Ctt|^i:< t)l^^LtV Sfcl^li. ffi^l ^^cfc 

[0 0 3 2] ^z.x. :$^mMit. ±iB<o^iS^^^-r^ 
fzi5b{zm,^tifz=t<Dx. msitsi^m^x^m^\±^nm 

[0 0 3 3] 

[iIii=^fi?/^-r^tci6(D^IS] *^H^(i. E I Gam a 

T:r±i*^;K'5)T^' v^^uW^S^^-:!— tf<^«S®W«*ffi 

i^xm^r^^mt. mwLnsLmm\z^±^<ommim 
^mt. *ii(cffiffl-r -s^i^Ba/^^^-^co^-t+^yic. # 

HSM^CO^ -< JH«$glc*f-r -Sir ^ ix^ 

giJ0fli^^i6^o ±IB^gf1^Be^^^«J^'r^^lS 

T% mwinm^m\z^±^o^m^^m.<<^mm^^^m 




[0 0 3 4] -r«i:t)*>. m^omm. €-zL-+fir^M 
tzTct^m^t^^^:^^y:^t. ±umm7.^^yzf 

[0 0 3 5] IB2(0^8^(*. ±IEm 1 <7>«B-«^::fct^T. 
[0 0 3 6] m3(r>^BM{t. ^=L—^iZ^m(D<t):m/^^ 

f E^P?a/ ^ 5 y - ^ S T/-t f B^r?ati$fi * ffi L ^ T . ±1 Et^ ^ 

fzf^mm'^n.. mtzU/^^:^-^. Rxsmzts:<t>mmm 

^f&y^'rvzfv^f&t^^ifzmzum^mm. mtztj:/^'^ 
jSLumzU<t>mmm<^i^^isbh^*ifzmm'^M 

tz^z.t^mw^-t^nw^:^'ry':ft. ±t^mm:^^^y^ 

xmst^fzmztsi/i'p ^ —9 Rifmtztjim^mm^m 

[0 0 3 7] mA(Dmmit. ±IBm3CD^0J^Zfcl^T. 

±tmm7.^ -J zfxmm^^^fzmzu^^^ -msm 
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7b<IE Li^*^S;bN**iJ»J"r^SI 2(D5«¥iJSij;^x'y 
[0 0 3 8] Sg5(^>«B^Ii. «8!ta)a.— ifPBl-e^Micffl 

y— ^i^fifcXT^^^^t. JiiE^«. ±fEiL-if(D^^rjaif 
fc<#:'a>Ba«ia&±ja-r«>^Baitffi^jax5^*:/^i:. ±fE 

[0 0 3 9] meo^B^fi. ±tB« 5 a>«gB^ic*5iAr. 

Y V ^ ^ ^ t; c <!: ^ t^gft ^ o 

[0 0 4 0] %i(r>%m^. Jiffimea^^B^iz^DUNT. 

-hlE-X-f E I G ama I S«^5$$ 

[0 04 1] mSCD^B^I*. JlIEmeO^B^iZjSLNT. 
ilET^-ri^^/US^^iCl*. EIGama I S«*34<D 

[0 0 4 2] m9(7>SgB^li. ±tEl6 5(D*B^(-fcL^r. 

±i±a>ffi8!i* s < * # - <t ^ i: -r ^ o 

[0043] mi o (?)^0^(i. IS^i1 1 - 9 co^5I;l^*^^c 
fcoT. mi.(D^— «fA<m2(DZL— if(C^*Lr. SlElS 

ZL— If (c^f -5>1t«*<. JtfiEm 1 a>3--if3i»^±SB^u— If 
ll^y^gi:^^^^.^ ±fiEzL— +flf*g^J«^SlCcfcy^fi£ 
[0 0 4 4] mi 1(7)^B^(i. a.-Hf|CitilCO<i>r?a/'^^ 

:^-9Jkif±t^^Amm^'^mi^x. ^m^Hx^tz^'< 



(8) 
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*Be^ft#R t $fflS X. -6 w i: * i: -r * . 
[0 0 4 5] Sgl 2(D*B^I*, ±fHlg1 10^f£B^(CfcL^ 

fztji^tBnmimi^x. -Tw- v^^t sulfate «(5-r -5 s« 

[0 0 4 6] mi 3©fl|fll±. *gS)i<Da.-1fFBTe^jaic 

fflt^p)*t-l.lS©^s(=>ferL■c. 3.—- tf(D»ffiffi«*ti«tfl6 

Bt. ±tm^^m±m^f&x'±m.^*i.fzmtztmm\n 

10 04 7] mi 4<Dj§?flia. -htsmi i~i 3a>m^ 

[0 0 4 8] mi SO^B^Ii, IS*«1 1 ~1 4(7)<5I;a 
[0049] 

[0 0 5 0] m 1 ronsferoi^si^-^'L'^'csiw-r 
[005 1] :$imM{zm^'f^ i>^j[^m^y5^it. 

ccDiHti^J^T'A 1 0 0(±. *:S§B^lc^^itfBJHi 
[0 0 5 2] TUt>'^. olIivXxAl OOT't*. SEB-B 

S«^T#Qffiffl*SS2 0^. a--- tf j , i. k^^t; 

^ttfcCDZL-1f^$ffi^3^g3 0. 4 O. 5 0. • • - <t;!)< 

h9-^ 1 o^^^LTSl^^cJHl■r^ci:3l^^f**t 

ilO^gS/^^;^— 'S' P V (Public Values ) t<mm^^ 



Tl^'S^ia'r— D (Public Database ) 
[0 0 5 3] liE0^S«ff#QffliS*SS2Oli. SEB^S 

[0 0 5 4] IL— tfffii>a5S3gS3 0. 4 0. 5 
O. • • • li. ^&>!^l^«(7>«Ja^ Lrt^^o flF>]^l*. 3. 

—■ »f j ffiSS*SSB3 Oli. iL— tF j @*coSjS@s j R 
±IBS«©Mi^&li«*^iELL^7b^S*^=^*^J»Jt-^fy55llffli3 

iN^o 13— j fflS^3Sg3 0(i. »r/c?^f*«* 

filSi-r^«SS«P3 5^. {tlgffli3 5T*5Sffi^nyc«Tfc^j: 

3 5T*^rlS^ttyrg^tc?'cf^€*ffit^rBS•^:S:*a^■r^ 
^^Sli3 4 t $'{i»K.rl^-5o 

[0 0 5 5] iUT> J;a<7>cfc5<»:3l«*>:^T-A1 0 0(0 
llli*$Ji8EE 1 Jil/^2^ffilNTlJ^B^'r^o i^. ±BBia 

[0 0 5 6] X7"'y::''s 2 o o : jHi->;^T-A 1 
o 0(D^il<D7^— <t LT. :^#?^»:^!Sp. Zp * 

0 : z->zp n: {01 ^mi^^o pit. m^ii. 

rp>2512 J <t:-r^o CtL^CD/^^pt— (-i^^^/^^ 
^PV (Public Values ) ) 1*. aiiv;^^^^! O 
O (C#AQ Ur l^^^T(Z>IL— tF*<T^ -tXf ^ C <t A^t? 

^tLri^-5^§^-x—^^—XPD (Public Database ) 

(authority ) Qffi^5S5SK2 0 I*. 'i>gaa*^ai2 1 

ircti-j. 85^^ im^m) so (ezp-1 * ) t. 
Siivo xpDicgs^-r^o 

®(DiL— -^fffiig^Si^B (zc-eiiiL— if (User) j ffiiS 
^^gSO^b^-S) I*. ii>r^^S^JSfflJ3 1 lcj:y. 

m im.^m) sj (ezp-i * ) ^t. -s^eaa mmt 

g|) vj (=afSjmo d p) ±S-^filKL, -i^^SaSlv j ^ 

[0057] *V T^S 2 0 1 : E«ii^gamiiEBJ«CD^ 

/£ 

iiEB^S^tT#Qffl^S3Sigg2 0(i. ^«±/i£§i5 2 2|Cc*; 
IL— Hf j CD^^Mvj S:. SLSfc (random number ) 

ElGama I B&^lC J: 

SLift) k (keZp_i * ) ^SS^L. - ■ - 



(9) 
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s= (HO (m) -SO ■ r) • k-1mod (p— 1) 
^f-SttS^ft^o C(DSp:Stm(C«-r-&E I Gama I Bt 

0 (m) (Dft*?yi::. ^i^>*i6&*ifca3Eli*ffifflLT 
[0058] S 2 O 2 : g^^gaSfiEB^SC^E 

SI 

2-e*filcU:rcT^^ v^7U«€ r . si:. ^(DUI^^^'t 
/^7-?*-^m^*E«^B8@iiEB-flS (m. r. s) 

X. 3.—- tf j ^4s*gs3 oic^uram-r^o 

[0 0 5 9] X^*:/ 3^3 203 : CH^Sltfc^— if j 
ffl«fi5fe»S3 Oli. i|nj»JfflX3 2|C,*:y. 
sj' =s-sj~^mod (p — 1) 

HO (m) = V Q r ■ r sj' (m o d p ) 

[0 0 6 0] T.'rvZ^S 2 0 4: ^r?aaBS'^<i>fijffl 

ffHOOn) • vQ -r= rsj' (mo dp) 

(CcfcU. r r J TaHOCm) • v o "•'m o d p J 

Tsj ' J *«5S5S<tLT. gStft^raPn^filcS 

[006 1] ^ZTr. m^\t. E I Gama I 0t-^(r<|: 
[0062] Tf.'r^yZfsko A (1) :-T-fV^;U5« 

0««±iaa53 3(±. ai^k' (ezp-i * ) ^^fH-t 

<2)S«±jaW3 3(i. 

r' =afk'nriodp 

(3)w^^fiicaJ3 3 1*. 

s' = (Ho (m* ) -sj ' • r) • (k' ) ~^mo 
d (p-1) 

®tLX. 3.— if j ^iS3S3^S3 oii. m' t. 

i&^^^Wi^ot^ii>(Dm^'j^mMmMm (m. r) 

.[00631 X7"^:; 7^3 204 (2) : S«^fiE 

c^vSSlt/ciL-if i ffiig5S3$S4 01*. «SSffl5 4 Sir 



rHO(ni')= (QfHOOn) ■ vQ -f) r' . (r' ) (mo 
d p) 

\tmm%'^% q j: o r si* -tf ir ^^x 

[0 0 6 4] ±a<DX-T'>-:^S2 04 : ^gaSHS 

^Zt?. m7L[t. ZL-Hf kffldS5Sgg5 OlCfc^NT. E 
I Gama I Bf cfc ^flS#<b* 3iS#(COLNTSi^ 

[0 0 6 5] Bt^^b : if kfflSffi5SSS5 Ol*. BS^ 
<ba5 5 6(Cj;y. ^i^m" ^ l^XTO) J: 5 LTBS^^b-T 

©Bt^^bfflis eri. 

Cl = rkmodp 

(3)Bt^^bS|l5 6(i. 

C2 =m'' • (a^OOn) -vQ"''modp)krnodp 
®^LT. ZL-Hf k^4§§5K3^g5 Ol±. BS^4bffli5 6-e 

[o o 6 6] : ctu^Sii-fco.— if j ffliS5S3Sa3 

Oli. m^S|i3 41^^:^. 

m" =C2 /Cl sj' mo d p 

[0 0 6 7] fSi. -tai<7>X7^'>:^S 2 O 4 : ^g^SBB-^ 
(OMf^ty^X. E I Gama I B&-^*ffll^tct(DS:KB-^ 

-^^ ^ffi u^fc t (7) ic fijffi-r -g) - <t Tb^-C ^ ^ o 
[0 0 6 8] -:>^(r. B2<7>^]Sfe©J^®iroUTBi0J-r 

-So 

[0 0 6 91 CCD^2C7>||*fe(Dff^^-C?li. _hj^Lt-mi 
CDjtJSO^ff^^lCtelf^iUli^X^A 1 0 0(C. E I Ga 

ma I BS^a^T^-f v^5';u««::&jC<x>iSfl^iKS3lffl-rSo 

ZCDtzisb. m 1 CDSIJfeCDff^^trli. E I G a m a I Bt^ 

[0 0 7 0] c:(Djg2(DllJS(7)ff^S^llfite-f ^ilfi 

^^L^rM^*Mlr|jiB^-r'g>o 
[007 1] X^'^y:^S 3 00: ffe^. ffifiixXT-A 1 
0 0(D^m(D^—^tLX.X^^s:^^P'. q (q(*p 

- 1 ^9jytj!]-5>) . Zp * (D^^-efcUE.'^ii^qO 

ff. -:^f63l±/\^y->3.r*1^H0 : Z-*Zq \ {O] . H 



(10) 
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1 : Zq {0. • • •. 2t -1) ^ffll^-&o 

Si. zzv\t. m^it. rp>25i2 J ^ rq> 

2160 J ^ r t >7 2J t-r^. Ctv^O/^^-?*— ^ 

(^Ba/<^^— ^ pv) it. lifivXT^Ai oo(c#iiD 
:^ ^ a ?^^*<fi c t> L> J: 5 ic®^ ir gffi * tiT l^ 

^d^m'r—'^ X p Dlcefs^?4^Tl^^ ta>i:-r €)p 
^iE^-«s«^T«Qfflaa*«S2 0l*. 'i:br?^s±iS 

e^2 1 iCcty . SfffiSsQ (eZq \ {O) ) <2^r?p1 
gvQ (=QrsOmo d p) ^ggSlvQ 

gg^— ^K— xpDirsffr-So *fc. sm0=L—^m 

(CZ-eiiO--- »f (User) jffi4S5*3gS3 0^ 
r^) I*. ^BaS±fi£fflJ3 1 i'mmsj (ez 

q \ (0) ) i:. -i^BaSvj (=GfSjmo dp) tt:± 

10 o 7 2] x^*>7^s 3 0 1 : g^s^BaaijEB^s<2>* 

iiEB^S«ff«Qfflffl*Sa2 0f*. ««±iSfflJ2 2(Cc); 
ZL— Hf j (7)ii>Pfi|vj SLSfe (random number ) 

^it. EIGama I B6#(C J:^7^-f ;US«) ^± 

SLS) k (k ezq \ {OJ ) S:S«L. 
r = vj k modp 

s == (HO (m) — sQ • r) • k "1 m o d q 
Umin'^^ffOo Z(7>2|i:S:m(C^-r^E I Gama I B& 

[0 0 7 3] ;^^*>':^S30 2 : m^<i>mmsLmm(r>^ 

iiEBJ»^^T#Qffi5S3S^g2 Oli. m^±m&2. 

/^^>-^m<h^E«^gaSiiE0-^§ (m. r. s) tL 
IL— tf J ffl«85S3Se3 OlC^LTitd-r^o 
[O 0 7 4] ?(.^-jZfS 3 0 3: C;K*Slt/=-=^— 9" j 
fflffl*gS3 0li. *iJSija5 3 2(C.i;y. 
sj ' =s • sj "Imodq 

c^HO(m) = V 0 r ■ r sj' (modp) 

[0 07 5] I^T- *V 3 O 4 : ^BBSlBS^tOfJjffi 

^LT. ZL-^f j ffl!ffl^gg3 0(i. 

c^HO(ni) • vQ rSj' (mo dp) 

|Cj:y. r r J S^^JS. rQrHO(m) -vQ-rmodpJ^ 



[0 0 7 6] -^C-C?. fiiJJ^Ii. S c h o n o r r BS^Cl 
cfe ^ ^ < i> ^ * fiJffi-r -SS^ C: O l^ T IftB^ f -g) o 

[0 0 7 7] ;<.7"*>3fS 3 O 4 (1) : "T^V^JUSS 

3.—tF j fflffi5t^3gS3 Oli. ^:S^jfifflJ3 3lCcfcy. ¥ 
0S«^flcffl3 3(i. a«k' (eZq \ {01 ) i± 

x=:rk modp 

(3)¥«±lS^3 3(i. 
e = Hl (x, m' ) 

y = k' — e'sj' modq 

©-^LT. a-— j ^3i^gg3 0(i. m' 

^^3 3T'4§t>tLfceJ^i;y SEB^g^ff^Q^^S^S 

3^s2o*Nb(DE€^BasijE^s (m. r) tmzmm 

Czc-criiL— »f iffiiS5fel$S4 0i:"r^) ic^L 
[O 0.7 8] X7"*>:;^S 3 O 4 (2) : ^««^iiE 

e = Hl ( rY • ( a HO (m' ) . v Q -r) ® m o d p . 

m' ) . 

5i^ss4oi±. za>{t^A<-e^fcis^ic. m' ic^-r^ 
r ^fiE * *Lfc w« fc ^ ;z it o 

[0 0 7 9] ^fz. ±i3iOXT-^V3^S 3 O 4 : ^i^glSBS 

^cr*. «iJ^li. :L-if kffifflS5S3$B5 0^cfct^T. e 

I Gama I BS-^(Ccl:^BS-^^b=£ff 3S^(C-^l^Ti^iB^ 

[0 0 8 0] pg-l-^b: ZL— if kffliS^gesoii, Bt-^ 

^ o 

©Bt^^b^ 5 6 (i. 
Cl = rkmodp 

©Bf-^^bWS 6 1*, 

C2 =m" " (aHOOn) • vQ "■'mo dp) k modp 
[0081] : C;h,^S(tfcZL— Hf j ffiiS^Sa 3 , 



(11) 



mW- 1 1-2027 66 



01*. «^»3 4(Ccfcy. 

=C2 /Cl sj* mo d p 

[0 0 8 2] fSS. ±i£a>X-X'>3fS 3 0 4: ^BaSBS^ 

CD3pJ^<!: LT. Schnor r Bg^-^E I G a m a 1 Bt 

[0 0 8 4] ;ia>m3<omm(ofimv{t. iautrsn 

<7)il)St5<7)ff^^|::^bMt-5ilili>::^7^A 1 0 0(C. E I Ga 
ma I BS^OT^-f v^;l/S«:^xe(7)Sff^lK*51^^^o 

■r<f*p*>. S3a)iijS6<Dji^iST?i*. m 1 a>si*6(Dff^fst 

|CftS:LT#fcHO (m) ) ^mi^^VSiZ^ HO (m) 

= 0 «fr^o 

[0 0 8 5] fSi. ca>jB3<D|ISfea)ft^^^llS6"f -SiHi 

JUT. ffi1a>ll^6(7)^^®l!:S^^:-&JSl::-^l^r^©^. 0 4 

[0 0 8 6] :^^^:/':fs 4 o o : 5t'f . iHiv;^7^A i 
o o<D*ScD7^-^<t LT. miBtp. Zp * a)S*-cfc 

UMOit^^p - 1 (Dev. — :^f63l±/\^V v^iatftHO : Z 

-^zp \ (o) ^mi^^o S). pJi. rp>2 

512 J t^:bo :Ltih:>(r>j<^^—^ C^ffl/^^^— 'S'P 
V) it. jifl->;^7^A1 O OlC#ADLTL^'&^rcD3.— 
+f*<7^-t^X■ri>-<b*<^C*^. R'o:^^t^^^A,mii<& 

%Qffil«*3^S2 0(i. 4F?f1M±filc§&2 ilCcty. 
msQ (eZp-1 * ) <i:.j^^MvO (=QfSQmod 
p) i:*±jSL. -i^gaSvO^'^Ba-T—' 5»^-XPDir 

(User) j ffliS^SISSa o^-r^) li. 

ai3 KCcty. fij^^sj (ezp-1 * ) <i>mmyf 

j (=afSjmodp) t^±f&L. -i^gaSvj ^^Ba^^ 
[0 0 8 7] :;!^v-^yz^s 4 o ^ : m^<t>MntUmM(0± 

m 

a.— if j ©^BaSvj SLSt (random number ) 
k ^mi^XmikLtz r *3j^A^. El game I ^^0>^ 

(DA:^D<1: Ltc$Sm7b< TOJ ttS^^B I Gama I B&^CD 

m^OilSL) k (keZp-1 *) ^S«L. 
r = vj^ modp 
s = sO " r'k~1mod (p— 1) 



[008 8] T.'r ^yZfSAOZ : g«^BB®liEB^»©ffi 

3l2felc. iiEWS*tT#Q^iS5fi3$S2 0(i. 

S (r. s) <tLr. tF j^ag^gS3o(cjitttur 

[0 0 8 9] X7"*v:^S403 : C Sl+tc3.— »f j 
sj' =s-sj"1mod (p— 1) 
V Q I' = r (m o d p ) 

/)<ia y 51-^ c <t ^ 5Sgi-r ^ o 

[O O 9 O] X7"*:;3^S 4 0 4: ^J^mW6^<Omm 
^LT. ZL— +f j ffldffi*SS3 0l*. 
vqI" = rSJ (modp) 

I'ct y . r r J *JS. TvO r mo d pj *^|iafil, 

Tsj ' J ^u^mtLx. j8i»*r«[H®(cs-:J<^Ba 

[009 1] -^-CI-C. m^it. E I Gama I BB-^lCcfc 
[O O 9 2] X7"*y:::^S 4 O 4 (1) :^^i>^Ji^^^ 

a.— if j ffiass^KS3 01*. »«±j«»3 3iccfcy. ^ 

(DS€^fiJc;aJ3 3(±. SL^k' (eZp-1 * ) ^±f&^ 

(2) S«^;£ffl3 3(*. 

r ' = Ofk' modp 

(3) ^«^/aSiJ3 3(i. 

s' = (H (m' ) -sj ' • r) • (k' ) "1 m o d 
(p-1) 

®^LT. ZL->tFjffi3S5S^S3 0(*. m' 

iSfflJS 3-Ci#b5h.tc r ' ;Rt/s' liE0^»*ff#Qffl 

ag5|^3Sa2 0*Nt>om€^gaSlijEB^S (m. r) 

t^Lx^m^^o 

[009 3] X7^^v:^S404 (2) : SSfiliiE 
cfcy. 

r HO(m')= ( vp r ) r' - ( r ' ) s' (modp) 
5^SS4 0(*. c(D5tlg?b<'^§-:rcli^(c. m' 

[0 0 9 4] J:aia>X5^*y:^S 4 0 4: li^ggilBS 

^z:x\ m^-it. iL-if kffliS*i^S-5 0-lcfct>T. E. 




(12) 



I Gama I |lS#l= J:■^>llf^^b5^T51g^l="^L^■CSiM 
[0 0 9 51 Bt^ib : 3.—- tf kfflSS^J^SS 01*. B6# 

o 

C1 = rkmodp 

C2=m" • (vQrmodp) ^"mo d p 

[0 0 9 6] : :i:K^Sttt-3.— tf j ffiMS*3$E 3 

m" =C2 /Cl sj* mo d p 

[O O 9 7] f^. ±Ti^(D:^^yyS 4 0 4: ^§3^06-^ 
(OmmtLX. El Gama I BS-^^-ffll^tctiOJSrlftB^ 

* ffl i^fc ^ ^ f Jffi"^ ^ - <t T* ^ -5) o 
[0 0 9 8] ±3aa)cfc5fC. *«B^|C*5l^Tfi. pitm 

a(Z>eiSlip- 1 . r = vjk=Q:sjk (mad 
p) T&y. sj * . kezp-i * Tfe^o 5fc 

L^li. pi:q7b<^S(-C?. qlip- 1 $:§jy«]y> « ^fi 
a;b<q. r = V j k = ^sjk (ma d p) "CfeU . s j 
eZq \ (O) . kezq \ (O) "Cfe-Se LfcA<o 

(D^j^mmt^ t> i+s: L Ti# t) *ifc<D^^ ii± < i^s^ ^ c <t 

[0 0 9 9] ^fz. ±3$Lfr<Pl;|xa)|ISfeCDff^Sl=^3t^T 

\>j.T(oj:.5i:^mm^^^tv. sac: 

®|jEeflS«fr#Qffl5S5fel$a2 0l±. ffS<Dn.-ifffi5g 
—if j fflffl*SS3 o \zn Lxmmir^o 
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©cix^glttciL— if j ffi$S*3Sa3 01*. x-fv^^u 
ffi-r-S*^ (One-time Certificates . fl6t>tSrliEe^S 

yj^) iz^i). emcoT"^ v^;u?«^±iSLfciL— if 

^ti<t(iSi)a>7=^^ v^JUS«S:^fi£Ltr:L— ift 
|^-<DZL-if-(?fc§)S)NSA^S«SiJ"r^-i:l±, 

-^f^:incDzL~-ifi:lc<to-C. ttaS:Wlc|^«lcBit. 

^tt* ^ ^l::iS]-t*1±^C4t:3b<-e*^o 
[o 1 o o] 

MSiB^ST? fe -i) =&<r#S-r ^ tci6(7>iS|g*<- 

ix, ctLfZctU. tf»fiW3tfJiaLtc(RS2ircfcor-e 

ra-r -ss^tt * i$i-t * 1^ ^ - ^ ^ o 

[[lia(DSfm5tfSiB^] 

[113] m^ommommi^t^i^x. jitEii^ivx^A 

I c J5 (t 5^ -f s> ^ *SiBj-r ^ f= fe 

o 

[04] m3<omt&<r>J\m[::^l^X. ±trMmi^^'rM. 

[0 5] i^^;i^s«*5C*KB-«-r5fcA^<z)0 

[JB^CDlftB^l 

1 o hr?— ^ 

2 o liEB^S^ff#ffi^*SS 

2 1 ^2^B3^±fiJcai 

2 2 

3 o 5 o ZL— if fflffi^iSffi 

3 1 <^mm±fS.& 

3 2 *IJSIJSP 

3 3 m^±m.u 

3 4 ^^ffli 

3 5.45 JifiS^ 

3 6. 5 6 Bt^^bSP 



(13) 
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1] 



20 



22 * 



iBliy:;tTA loo 



PD I 



30 



1 i^5aa^fi»(vj.) K 31 
- 1 nag h -32 

s' )K33 



H g^gCm')ZIh 34 
I ttSgg K 35 



ClC2 



- I C%<bg(Ci.C2) K 56 



^50 



S200: 



S201: SLS (random number)k 
r»vjVno(4> 
={Ho(m)— s«* r) • k~^niod(p— 1) 



J^^^^PV (Public Values) 



P.«. HO 




S202: (m,r,s) 



tffi^^-;^PD (Public Database) 



\ S204(0: mxm\r',s' / atig^:, 
(User) I ^ — — -UVerifier)J 

j / V ' 



S203: 9j=s»sr^ mod(p— 1) 
flt"°0")3>ftf.r"J'(modp) 



S204(2): r"**^"'5s(a""^"»>*v«-^''*(r')'(modp) 
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[@3] 



5301: iLSl (random number)k 
r=vjmodp 

8=(Ho(m)-SQ* r)*k~^modq 



S 300: 

J^^_;jp V (Public Values) 




S302: (m^,s) 



P>q.«>H() 



J^.^pjj (Public Database) 




40 



S303: Si=s-sr^ modq 



S304(2): e=Hi(r^-{a"**^'"'^-vo"0*modp,m') 



[114] 



S401: &S( (random nunnbBr)k 
r»Vfmodp 

8=8o«r-k ^mod(p-l) 




S402: ( r,s) 



S400: 

^j*^-;tPV (Public Values) 




P>«. HQ 



jfj^'^-^tPD (Public Database)| 



j V . i 



S403: s/=s-sr^ mod{p-1) 
vo'^=r"^(modp) 



yer|fier> 

S404(2): r»'<'"'^=(v0''-(O''(modp) 
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[|^5] 

S500: 



S501: SLil (random number)k 
zcv) modp 

e-Hi(x.zi) A«„«c*\ 
y»r+€ • 30 m odq /affli«M \ 



jfi^^^j^PV (Public Values) 




jf j^,;tPD (Public Databas^ 



Prq.«, HQ 

T 



S502: (y.e.z} |£W<SlTtQ(Z>^flM-- Vq 



S504: e=Hi{«^- w*Wdp.z) 
B|=Hi(x^*z*^ modp,m) 



I 



I 



